Hacker Who Stole 100 Million People’s Personal Info From Capital One Gets 5 Years Probation

Paige Thompson , an ex - Amazon software locomotive engineer who steal the credit card applications , societal security figure , and bank account number ofmore than 100 million citizenry from Capital One , cost the company at least $ 270 million , was sentenced to sentence served and just five years probation late Tuesday in a Washington court .

The 37 - year - onetime Thompson , who also cash in one’s chips by the online handle “ fickle , ” was see guilty in June of telegram faker , unauthorized access to a computing machine and damaging a protect computer . The Seattle jury acquitted her of other charge including identity theft , agree to theAP . Judge Robert Lasnick said prison house would be especially difficult for Thompson “ because of her mental wellness and transgender condition . ”

During the test , Thompson ’s attorneys indicate that she never misused the personal information from the companies she hacked . The hacker ’s lawyers further fence that Thompson was a white lid hacker who had been attempt to collect money from company by pointing out exposure in their systems , according toThe Seattle Times . A evaluator still has to resolve amends for victims of her hack , which should be determined this December , according to the U.S. Attorney ’s office . Capital One reached a settlement of $ 190 million with affected customer and was fined $ 80 million by the Treasury Department .

Capital One has been investigated by an arm of the U.S. Department of the Treasury for its allegedly lax security measures prior to the massive 2019 hack.

Capital One has been investigated by an arm of the U.S. Department of the Treasury for its allegedly lax security measures prior to the massive 2019 hack.Photo: MARK RALSTON/AFP (Getty Images)

prosecutor decry what they ring a light sentencing , earlier involve for Thompson to attend seven years . In arelease , U.S. Attorney Nick Brown said public prosecutor were “ very discomfited with the homage ’s sentencing conclusion . This is not what Justice Department looks like . ” prosecuting attorney argued in court that Thompson did hundred of zillion of dollar in damage to both companies and individuals through hacks of not just Capital One , but30 other companies , educational institutions , and more . Some of those other hack need personal data , but prosecuting officer stopped curtly of charge Thompson of selling or apportion any of it .

Prosecutors also argued Thompson used a digital tool she built herself to comb out through Amazon Web Services ( AWS ) and download companies ’ exploiter data . She also used the instrument to plant parasitic crypto mining software on other companies data processor that would send the return to a crypto pocketbook under her control .

In 2019 , Thompson was captivate after bragging about the data point breach on Twitter and other social sensitive . She reportedly posted a message on a Slack channel say : “ I ’ve fundamentally trounce myself with a bomb vest , dropping Washington one dox and let in it . ” She also ran a hack and crack group on the social platformMeetupcalled “ Seattle Warez Kiddies . ”

Xbox8tbstorage

For its part , Capital One has long drag out its feet on updating its slack cybersecurity methodology . Reports from 2019 show that even before the hack , some cybersecurity employee at Capital One were aver the company had failed toaddress firewall exposure . The company had also not installed the software it had already buy that would aid it detect severance .

Gizmodo reached out to Capital One for comment on Thompson ’s sentencing and what the company has done to bolster its cybersecurity capability but did not instantly hear back . Until last calendar week , victims of the hack werestill able to secure moneyfrom a settlement stemming from class legal action lawsuit that exact the ship’s company was negligent in its cybersecurity method .

In 2020 , the U.S. Department of the Treasury ’s Office of the Comptroller of Currency investigated Capital One and feel that the bankignored obvious problemswith its cloud - based scheme and their own internal audits routinely failed to recognize those fault . The OCC determined the cant had to bear a $ 80 million fine and appoint a committee to oversee the savings bank ’s cybersecurity standards .

Hp 2 In 1 Laptop